Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-02-2014 01 Ran by Bossik at 2014-02-15 18:20:27 Run:1 Running from C:\Documents and Settings\Bossik\Moje dokumenty\Pobieranie\czyszczenie Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-1715567821-573735546-725345543-1004\...\Run: [spoolsv32] - "C:\WINDOWS\system32\javaw.exe" -jar "C:\Documents and Settings\Bossik\Dane aplikacji\Win32\spoolsv32.jar" Startup: C:\Documents and Settings\Bossik\Menu Start\Programy\Autostart\mdwhuzmxv.vbs () SearchScopes: HKLM - DefaultScope {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = http://www.firetab.org/?type=ds3se&p={searchTerms} SearchScopes: HKLM - {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = http://www.firetab.org/?type=ds3se&p={searchTerms} SearchScopes: HKCU - DefaultScope {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = http://www.firetab.org/?type=ds3se&p={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=9C65001D7DC06731&affID=124687&tsp=4998 SearchScopes: HKCU - {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = http://www.firetab.org/?type=ds3se&p={searchTerms} FF HKLM\...\Firefox\Extensions: [dnshelp@dnshelp.com] - C:\Documents and Settings\Bossik\Dane aplikacji\Helper FF Extension: Helper - C:\Documents and Settings\Bossik\Dane aplikacji\Helper [2013-09-08] FF Plugin: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd) FF Plugin: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd) Task: C:\WINDOWS\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe Task: C:\WINDOWS\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe Task: C:\WINDOWS\Tasks\EPUpdater.job => C:\DOCUME~1\Bossik\DANEAP~1\BABSOL~1\Shared\BabMaint.exe S2 dealplylive; C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-26] (DealPly Technologies Ltd) S3 dealplylivem; C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-26] (DealPly Technologies Ltd) S2 AddonsHelper; C:\Documents and Settings\Bossik\Ustawienia lokalne\Temp\OCS\Downloads\9f8cc62c3640bf6eb115b4c78bb22a3f\8a2438a7aa1e858526caff1f4deab159\AddonsHelper.exe [X] S3 catchme; \??\C:\DOCUME~1\Bossik\USTAWI~1\Temp\catchme.sys [X] S3 EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [X] S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X] HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5} => ""="" C:\Documents and Settings\Bossik\b38L10pB.UK4 C:\Documents and Settings\Bossik\b49S56oS C:\Documents and Settings\Bossik\i15Z28qV C:\Documents and Settings\Bossik\y12L73sE C:\Documents and Settings\Bossik\y82T13fS C:\Documents and Settings\Bossik\Dane aplikacji\Win32 ***************** HKU\S-1-5-21-1715567821-573735546-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Run\\spoolsv32 => Value deleted successfully. C:\Documents and Settings\Bossik\Menu Start\Programy\Autostart\mdwhuzmxv.vbs => Moved successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{721061fb-eb79-4568-a03c-3ce26d68dae9} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{721061fb-eb79-4568-a03c-3ce26d68dae9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{721061fb-eb79-4568-a03c-3ce26d68dae9} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{721061fb-eb79-4568-a03c-3ce26d68dae9} => Key not found. HKLM\Software\Mozilla\Firefox\Extensions\\dnshelp@dnshelp.com => Value deleted successfully. C:\Documents and Settings\Bossik\Dane aplikacji\Helper => Moved successfully. HKLM\Software\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3 => Key deleted successfully. C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll => Moved successfully. HKLM\Software\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9 => Key deleted successfully. C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll not found. C:\WINDOWS\Tasks\DealPlyLiveUpdateTaskMachineCore.job => Moved successfully. C:\WINDOWS\Tasks\DealPlyLiveUpdateTaskMachineUA.job => Moved successfully. C:\WINDOWS\Tasks\EPUpdater.job => Moved successfully. dealplylive => Service deleted successfully. dealplylivem => Service deleted successfully. AddonsHelper => Service deleted successfully. catchme => Service deleted successfully. EagleNT => Service deleted successfully. EagleXNt => Service deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => Key deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => Key deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => Key deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => Key deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5} => Key deleted successfully. C:\Documents and Settings\Bossik\b38L10pB.UK4 => Moved successfully. C:\Documents and Settings\Bossik\b49S56oS => Moved successfully. C:\Documents and Settings\Bossik\i15Z28qV => Moved successfully. C:\Documents and Settings\Bossik\y12L73sE => Moved successfully. C:\Documents and Settings\Bossik\y82T13fS => Moved successfully. "C:\Documents and Settings\Bossik\Dane aplikacji\Win32" => File/Directory not found. ==== End of Fixlog ====